ConMan Typer Trojan - Amiga Virus Encyclopedia


    Amiga Virus Encyclopedia    
    ConMan Typer Trojan

    - CONMAN-HYPER-Trojan             Used to break into BBS's
      Other name: Conman Hacker    

        Type A:
        Length packed:  1948 Byted
        Length unpacked:1380 Bytes
        linked before WorldClock (for example).
        This can be read inside the file:
          00000000 00000000 00000000 4242533a ............BBS:
          55534552 2e444154 41004242 533a5553 USER.DATA.BBS:US
          45522e4b 45595300 646f732e 6c696272 ER.KEYS.dos.libr
          61727900 41452e4d 61737465 7200434f ary.AE.Master.CO
          4e4d414e 00000000 00000000 00000000 NMAN............
          00000000 00008948 59504552 00000000 .......HYPER....
        No bent vectors.
        No new process in memory.
        No command will be written in C:.
        That thing is only dangerous to Sysops.
        VT suggests erase, if you ever find the file on it's own.
        Writes #$2B to $00000000 for finding itself.
        Searches for AE.Master-Port. If not found, it will end it's
        run. After that USER.DATA and USER.KEYS will be tried to
        read out.

        Removal: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                 Kickstart all others: VirusZ III, and also Xvs.library must be installed

     Translated to English by M0rpheus © 2001 VHT-Denmark
     Org. Test by Heiner Schneegold.


Virum Help Team
Denmark & Canada
Copyright © All rights reserved